Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/40/5130e5-9312-48de-ae2a-342d1b381d87/1/HYkzwZPwTjJEHjcWLcTe-pdEuE8.mft
File: HYkzwZPwTjJEHjcWLcTe-pdEuE8.mft (raw, json)
Hash identifier: SJkkFWzTc2vqz61rqdRZhFMBY/TiX1HpZxT5q2scaoE=
Subject key identifier: 14:E3:60:57:68:8C:B1:E3:F3:A3:24:82:82:A8:A0:38:FA:3C:06:6E
Authority key identifier: 1D:89:33:C1:93:F0:4E:32:44:1E:37:16:2D:C4:DE:FA:97:44:B8:4F
Certificate issuer: /CN=1d8933c193f04e32441e37162dc4defa9744b84f
Certificate serial: 0194BD1762E35854FE30A7A234B2E5C7ADF2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HYkzwZPwTjJEHjcWLcTe-pdEuE8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/40/5130e5-9312-48de-ae2a-342d1b381d87/1/HYkzwZPwTjJEHjcWLcTe-pdEuE8.mft
Manifest number: 11EF
Signing time: Fri 31 Jan 2025 16:00:13 +0000
Manifest this update: Fri 31 Jan 2025 16:00:13 +0000
Manifest next update: Sat 01 Feb 2025 16:00:13 +0000
Files and hashes: 1: HYkzwZPwTjJEHjcWLcTe-pdEuE8.crl (hash: Z8f6eklRJE8z5PasGmzmH9guR28wyUavQt30wR/Xpm0=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:17:62:e3:58:54:fe:30:a7:a2:34:b2:e5:c7:ad:f2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1d8933c193f04e32441e37162dc4defa9744b84f
Validity
Not Before: Jan 31 16:00:13 2025 GMT
Not After : Feb 1 16:00:13 2025 GMT
Subject: CN=14e36057688cb1e3f3a3248282a8a038fa3c066e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:2f:58:5d:fa:37:fd:b4:86:b5:d1:70:d1:32:
3e:0e:80:1b:cc:9a:30:19:16:fa:d5:38:3f:b7:ca:
a8:4b:9a:ae:79:fe:60:90:6e:7d:f0:22:48:9b:e4:
e5:8c:46:c8:31:75:67:b6:ac:1c:bc:60:9f:9d:1e:
85:70:c5:dc:bd:0a:ed:f9:4d:b6:93:9a:9d:ed:af:
8c:73:5b:86:5d:4f:4a:76:b1:a3:0e:0a:c6:e9:7e:
e7:b8:be:0a:73:bb:ac:64:e9:ba:7f:91:5e:56:c3:
38:09:78:67:3d:4f:33:5e:32:2c:08:89:c4:f3:b7:
a1:ec:41:c0:d1:82:45:8f:af:02:c9:2c:a1:a8:07:
10:0c:02:00:bb:cc:43:a4:d7:60:99:e2:bf:83:73:
ae:27:d7:fe:f0:5e:8c:21:e9:4b:54:d9:bf:c4:f8:
55:19:41:40:fb:9e:9c:54:a1:ce:5c:55:02:76:8a:
ec:79:63:9a:e6:79:83:f7:ec:db:80:54:af:91:3f:
ca:2e:b2:fc:8a:6c:35:a5:e0:88:68:a6:ba:0e:23:
af:ca:1f:df:55:b4:e9:2a:75:71:aa:85:6c:65:df:
9c:74:d8:3c:d2:bb:2b:96:7b:f2:83:bc:10:84:7c:
75:d1:41:fc:a4:b9:17:60:e5:50:b5:8b:ad:8b:b0:
95:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
14:E3:60:57:68:8C:B1:E3:F3:A3:24:82:82:A8:A0:38:FA:3C:06:6E
X509v3 Authority Key Identifier:
keyid:1D:89:33:C1:93:F0:4E:32:44:1E:37:16:2D:C4:DE:FA:97:44:B8:4F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HYkzwZPwTjJEHjcWLcTe-pdEuE8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/5130e5-9312-48de-ae2a-342d1b381d87/1/HYkzwZPwTjJEHjcWLcTe-pdEuE8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/40/5130e5-9312-48de-ae2a-342d1b381d87/1/HYkzwZPwTjJEHjcWLcTe-pdEuE8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0c:78:bc:da:2c:54:47:f2:1f:91:32:4f:35:86:24:6f:bd:65:
7c:4c:0f:57:5c:4e:f9:48:26:06:b4:6e:8f:8c:29:8f:0d:a3:
34:46:42:2c:a9:87:c1:3b:f6:01:1d:b2:65:2c:5f:ed:d0:5a:
44:f8:55:f4:c5:ed:fb:9a:e4:73:37:2e:06:2b:4b:3e:f0:8b:
be:38:8a:71:3b:b1:f6:e9:5d:6c:9c:bd:1a:74:a9:98:fb:40:
af:ca:99:4d:8c:03:ce:93:e6:05:dd:fa:04:eb:fc:f6:1e:ac:
ea:cb:02:91:fc:23:94:7b:93:62:75:37:36:e4:dc:54:97:1f:
0f:b3:79:f7:26:36:24:ec:eb:8d:64:ee:2c:13:df:d0:77:32:
41:da:bf:8e:91:eb:f4:69:b9:ba:f0:51:f3:d7:9c:8f:e5:bc:
57:c2:46:8b:a6:be:43:9b:18:83:bb:6d:e9:c8:18:e0:cf:37:
57:5d:35:e1:c8:c7:89:d4:dc:1a:1b:dd:fd:93:c1:09:26:17:
f9:62:9c:f1:bb:54:28:7f:10:d1:c4:fc:4a:e3:95:af:96:90:
97:24:61:a8:44:df:0c:6a:61:b1:d1:35:f0:11:87:c4:ec:2c:
51:79:ab:9c:57:99:a6:03:12:dd:b6:51:eb:9e:ac:98:ab:f5:
58:d6:39:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 19:02:18 2025 by rpki-client